ccgost on DOS

Gisle Vanem <giva <at> bgnett.no>
2007-01-04 15:57:35 GMT

There is a problem building OpenSSL on a 8+3 filesystem like
DOS due to the files:
engines/ccgost/gost2001.c
engines/ccgost/gost2001_keyx.c
The latter overwrites the first using djgpp's tar. Could you please
rename them to something like:
engines/ccgost/gost01.c
engines/ccgost/gost01_keyx.c
so they become 8+3 unique?
Gisle V.
# rm /bin/laden
/bin/laden: Not found
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev <at> openssl.org
Automated List Manager majordomo <at> openssl.org

Re: ccgost on DOS

Victor B. Wagner <vitus <at> cryptocom.ru>
2007-01-04 18:58:27 GMT

On 2007.01.04 at 16:57:35 +0100, Gisle Vanem wrote:
> There is a problem building OpenSSL on a 8+3 filesystem like
> DOS due to the files:
> engines/ccgost/gost2001.c
> engines/ccgost/gost2001_keyx.c
Sorry, when I named files I haven't thought than anybody still use real
DOS with no long names support of some sort as development platform.
Personally I use linux-hosted cross-compiler when I need to compile
something for DJGPP platform.
It'll be interesting to see if ccgost engine can work at all under DOS -
we never intended it to be used on the platform without dynamic loading,
and OpenSSL doesn't support dynamic loading, available in DJGPP 2.04.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev <at> openssl.org
Automated List Manager majordomo <at> openssl.org

linux-arm hardware

Andy Polyakov <appro <at> fy.chalmers.se>
2007-01-04 23:06:15 GMT

Guys,
I've written some ARM assembler and would like to benchmark it. So if
anybody on the list has access to linux-arm hardware, please contact me
for instructions. A lot of thanks in advance. A.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev <at> openssl.org
Automated List Manager majordomo <at> openssl.org

Cavium TurboSSL type of optimizations

I am experimenting with a CAVIUM SSL hardware accelerator, and there seems to be two ways to use the hardware.One option is through OpenSSL Engine interface. The other option is by using their proprietary TurboSSL library, which appears to be a port of OpenSSL.
I do see more work involved in porting our apps on to TurboSSL, but some of the optimizations they have done seem to be very effective.I would like to know if OpenSSL will have any of these types of optimizations in the next releases?

[openssl.org #1454] RSA key exponents different from 3 and F4

Annie Yousar via RT <rt <at> openssl.org>
2007-01-05 09:32:45 GMT

Dear all,
Bleichenbacher's attack shows that it was possible to forge a PKCS #1
v1.5 signature signed by a key using exponent 3.
Unfortunately the implementation of the OpenSSL command
openssl genrsa ...
allows only to create keys with exponent 3 or F4. Nevertheless the new
RSA key generation routine RSA_generate_key_ex available in 0.9.8 works
already with arbitrary exponents.
The included minor patch of apps/genrsa.c adds a new option for exponent
selection to the genrsa command.
Because OpenSSL version 0.9.7 doesn't use RSA_generate_key_ex with
exponents BIGNUM but unsigned long, this patch is applicable to version
0.9.8++ only.
Regards,
Ann
--
Annie Yousar at egbg dot de
______________________________________________________________________
OpenSSL Project http://www.openssl.org
Development Mailing List openssl-dev <at> openssl.org
Automated List Manager majordomo <at> openssl.org